CVE-2014-1303
Apple Safari 7.0.2 - Remote Code Execution via Heap-Based Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2014-1303. PoCs published by Ren Kimura, TJ Corley, RKX1209.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2014-1303, a WebKit heap-based buffer overflow vulnerability. It includes ROP chains and payload execution capabilities, ported to work on Linux (Ubuntu 14.04 with WebKitGTK 2.1.2).
Description
Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Liang Chen during a Pwn2Own competition at CanSecWest 2014.
Exploits (3)
This is a proof-of-concept exploit for CVE-2014-1303, a WebKit heap-based buffer overflow vulnerability. It includes ROP chains and payload execution capabilities, ported to work on Linux (Ubuntu 14.04 with WebKitGTK 2.1.2).
This is a proof-of-concept exploit for CVE-2014-1303 targeting PS4 firmware < 2.50. It leverages DNS spoofing to trigger an info leak and ROP chain execution when the user navigates to the User's Guide page.
This repository contains a proof-of-concept exploit for CVE-2014-1303, a WebKit heap-based buffer overflow vulnerability, ported to Linux (Ubuntu 14.04 with WebKitGTK 2.1.2). It includes ROP chains, a remote loader, and demonstrates code execution via a crafted HTML page.